Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAHti5NHO21GvW1B6a_kuNzUkxWpqjZyEt+2d-00Oyfjw7wEOfw@mail.gmail.com>
References: 
 <1798894757.3228202.1457044265613.JavaMail.yahoo.ref@mail.yahoo.com>
	<1798894757.3228202.1457044265613.JavaMail.yahoo@mail.yahoo.com>
	<CAGBAQ46xKuSmeJ=rbPegA-=WFYuzPwftuMrS5f0uhGDBnfG_Qg@mail.gmail.com>
	<CAHti5NHO21GvW1B6a_kuNzUkxWpqjZyEt+2d-00Oyfjw7wEOfw@mail.gmail.com>
Date: Fri, 4 Mar 2016 14:30:22 +0100
Message-ID: 
 <CAFedD42mjZ+hCXvbxF430ZZouNZbiWtmP5X09hoNZwGvr9Zr8Q@mail.gmail.com>
From: Luca Toscano <toscano.luca@gmail.com>
To: users@httpd.apache.org
Cc: "schnappiwololo@yahoo.com" <schnappiwololo@yahoo.com>
Content-Type: multipart/alternative; boundary=001a114035aef76dca052d391d67
Subject: Re: [users@httpd]

--001a114035aef76dca052d391d67
Content-Type: text/plain; charset=UTF-8

Hello!

2016-03-04 9:30 GMT+01:00 Daniel <dferradal@gmail.com>:

> Files where directives are defined do not matter at all, what matters is
> the "Context" in which they are placed, that is server config, virtualhost,
> directory, etc, If you look at the official docs all directives have a
> specific context in which they can be used.
>

Adding some details about what Daniel was referring to:
http://httpd.apache.org/docs/2.4/sections.html


> On Thu, Mar 3, 2016 at 5:31 PM, schnappiwololo@yahoo.com.INVALID <
>> schnappiwololo@yahoo.com.invalid> wrote:
>>>
>>>
>>> Apache options like "SSLProtocol", "SSLCipherSuite", and
>>> "HonorCipherOrder" among others can be put in both
>>> /etc/apache2/apache2.conf (Debian based) or
>>> etc/apache2/mods-available/ssl.conf (or even the virtual host configuration
>>> file).
>>>
>>> Which location should these server wide SSL settings be
>>> optimally/conventionally placed (ssl.conf or apache2.conf)? Furthermore and
>>> more importantly if the settings conflict in these two files/ locations
>>> which setting/file takes precedence?
>>>
>>>
My personal view: I would place them only where they are needed (i.e. if
you have only one Virtual host listening on port 443 with all the SSL
directives in there). For the precedence question, please check the above
link!

Hope that makes sense!

Luca

--001a114035aef76dca052d391d67
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello!<br><div class=3D"gmail_extra"><br><div class=3D"gma=
il_quote">2016-03-04 9:30 GMT+01:00 Daniel <span dir=3D"ltr">&lt;<a href=3D=
"mailto:dferradal@gmail.com" target=3D"_blank">dferradal@gmail.com</a>&gt;<=
/span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.=
8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-st=
yle:solid;padding-left:1ex"><p dir=3D"ltr">Files where directives are defin=
ed do not matter at all, what matters is the &quot;Context&quot; in which t=
hey are placed, that is server config, virtualhost, directory, etc, If you =
look at the official docs all directives have a specific context in which t=
hey can be used.</p></blockquote><div><br></div><div>Adding some details ab=
out what Daniel was referring to: <a href=3D"http://httpd.apache.org/docs/2=
.4/sections.html">http://httpd.apache.org/docs/2.4/sections.html</a>=C2=A0<=
/div><div><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(2=
04,204,204);border-left-style:solid;padding-left:1ex"><div class=3D""><div =
class=3D"h5"><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rg=
b(204,204,204);border-left-style:solid;padding-left:1ex"><div class=3D"gmai=
l_extra"><div class=3D"gmail_quote">On Thu, Mar 3, 2016 at 5:31 PM, schnapp=
iwololo@yahoo.com.INVALID <span dir=3D"ltr">&lt;<a href=3D"mailto:schnappiw=
ololo@yahoo.com.invalid" target=3D"_blank">schnappiwololo@yahoo.com.invalid=
</a>&gt;</span> wrote:<blockquote class=3D"gmail_quote" style=3D"margin:0px=
 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);bor=
der-left-style:solid;padding-left:1ex"><div style=3D"color:rgb(0,0,0);font-=
family:HelveticaNeue-Light,&#39;Helvetica Neue Light&#39;,&#39;Helvetica Ne=
ue&#39;,Helvetica,Arial,&#39;Lucida Grande&#39;,sans-serif;font-size:13px;b=
ackground-color:rgb(255,255,255)"><div><br></div><div dir=3D"ltr">Apache op=
tions like &quot;SSLProtocol&quot;, &quot;SSLCipherSuite&quot;, and=20
&quot;HonorCipherOrder&quot; among others can be put in both=20
/etc/apache2/apache2.conf (Debian based) or etc/apache2/mods-available/ssl.=
conf (or even the virtual host configuration file).<br>
<br>
Which location should these server wide SSL settings be optimally/conventio=
nally placed (ssl.conf or apache2.conf)?=20
Furthermore and more importantly if the settings conflict in these two=20
files/ locations which setting/file takes precedence?</div><div dir=3D"ltr"=
><br></div></div></blockquote></div></div></blockquote></div></div></div></=
blockquote><div><br></div><div>My personal view: I would place them only wh=
ere they are needed (i.e. if you have only one Virtual host listening on po=
rt 443 with all the SSL directives in there). For the precedence question, =
please check the above link!</div><div><br></div><div>Hope that makes sense=
!</div><div><br></div><div>Luca</div><div>=C2=A0</div></div><br></div></div=
>

--001a114035aef76dca052d391d67--